CONTINUOUS INTERNET TELEMETRY24H DRIFT1,683 material changesacross 1,481 domains · +261 vs yesterdayDNS DRIFT10 domains changed DNS providertop destination parity.domains · -11 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · -1 vs yesterdayNOW862 curated domains not answering+152 vs yesterdayERRORS3,932 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,875 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,683 material changesacross 1,481 domains · +261 vs yesterdayDNS DRIFT10 domains changed DNS providertop destination parity.domains · -11 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination pphosted.com · -1 vs yesterdayNOW862 curated domains not answering+152 vs yesterdayERRORS3,932 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,875 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

mend.io

Observed 2026-07-17T21:08:14.539Z (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Email byGoogle Workspace
Also usesGoogle Search ConsoleAtlassianFigmaDockerZoom
IPv6 · 6 subdomains · cybersecurity_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat mend.io actually stands on - every host below is a signed observation
mend.io
A / AAAA
18.65.3.3718.65.3.7318.65.3.2518.65.3.23+8 more
Cloudflareserves the site
NS
elliot.ns.cloudflare.commalavika.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
alt4.aspmx.l.google.comalt3.aspmx.l.google.comaspmx.l.google.comalt2.aspmx.l.google.com+1 more
Google Workspacereceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.mend.io/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time280 ms
DNS resolutionNOERROR
Redirect chain
https://www.mend.io/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 4

  • 18.65.3.37
  • 18.65.3.73
  • 18.65.3.25
  • 18.65.3.23

AAAA 8

  • 2600:9000:2366:6a00:1c:c724:8440:93a1
  • 2600:9000:2366:6c00:1c:c724:8440:93a1
  • 2600:9000:2366:1200:1c:c724:8440:93a1
  • 2600:9000:2366:2400:1c:c724:8440:93a1
  • 2600:9000:2366:9c00:1c:c724:8440:93a1
  • 2600:9000:2366:bc00:1c:c724:8440:93a1
  • 2600:9000:2366:4c00:1c:c724:8440:93a1
  • 2600:9000:2366:4000:1c:c724:8440:93a1

MX 5

  • 10alt4.aspmx.l.google.com
  • 10alt3.aspmx.l.google.com
  • 1aspmx.l.google.com
  • 5alt2.aspmx.l.google.com
  • 5alt1.aspmx.l.google.com

TXT 25

  • google-site-verification=70MgCdEf_ZLynIpoudaZi5DJao9-m7Bo2Q-RN3iqaOE
  • cursor-domain-verification-zd5q07=FZTAs1oePCoGoQ5qU6VATce2n
  • MS=ms89870022
  • v=spf1 redirect=_s1hwd6d8k.sdmarc.net
  • hgstpklz2563dgvz7ppkzf74g6048z8g
  • _jxjxtofcn66dgy6b6bmw1v6jh8sdvcz
  • xptxm88v5llg7rr1kx9blyp53km4h1vx
  • google-site-verification=XOgiBsAWUbtZnpZEbhv6TA9zt4JDKrdrWx100y0x68g
  • lemlist-verif=-5e2d3c73
  • openai-domain-verification=dv-PjpX2ZbgAz6nX5SDiyVBv9p5

NS 2

  • elliot.ns.cloudflare.com
  • malavika.ns.cloudflare.com

SOA 1

  • elliot.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (0)

None.

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for mend.io. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for mend.io <a href="https://domaindrift.io/t/mend.io"> <img src="https://domaindrift.io/badge/mend.io.svg" width="300" height="64" alt="DomainDrift signed observations for mend.io"> </a>

Ed25519 Receipt

Receipt ID
2d9e1b94-2093-471b-a766-22e041a3b097
Output Hash
4c04e6b28ac1d46f7f1a72726441e3c6086e3c7b9465ec4e23de07ece458efe2
Signature
ed25519:57d1fc72507c2e7c0eecdc403cf20d0f3459e898153860693f6b69f0dc95c51c445bebd295f5c7682b87296c1466f3c6a3f3ab7f90fc0e2197b8c76d8f0c1e08
Public Key
ed25519:7aad40f2d6399c207fe2fc15aade04a78324787a355d36725cc90687f9e10cff
Parent
(genesis)
Plane
fast
Verify this in your browser